topic Correct use of the "add legacy user access" option for VPN remote user authentication in SASE and Remote Access

Correct use of the "add legacy user access" option for VPN remote user authentication

Matlu — Mon, 17 Oct 2022 01:07:43 GMT

Hello, everyone.

I have inherited an infrastructure that is running a ClusterXL and VPN remote user connections service. I have noticed something curious in this network, and it is that in the ORIGIN column, the user groups are working with the option of "add legacy user access", and this generates a doubt in my mind.

Is it mandatory to work the new rules created for remote users with this option?

What does this option in the title of the post refer to?

Thanks for your comments.

Re: Correct use of the "add legacy user access" option for VPN remote user authentication

_Val_ — Wed, 19 Oct 2022 07:55:59 GMT

This is unclear, can you elaborate please, maybe with some screenshots?

Re: Correct use of the "add legacy user access" option for VPN remote user authentication

PhoneBoy — Wed, 19 Oct 2022 10:47:19 GMT

The only reason you might use the legacy option is in an environment where you’re not using Identity Awareness, but would strongly encourage against it.
Access Roles are the way to go here.